limen-ai 1.0.0

package/dist/orchestration/artifacts/cascade_walker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade_walker.js","sourceRoot":"","sources":["../../../src/orchestration/artifacts/cascade_walker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,wDAAwD;AACxD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAU7B;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,iBAAoC,EACpC,IAAwB,EACxB,QAAyB,EACzB,KAAiB;IAEjB,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC/C,CAAC;IAED,4DAA4D;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,iDAAiD;IACjD,MAAM,KAAK,GAAiD,EAAE,CAAC;IAE/D,0CAA0C;IAC1C,KAAK,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAE/B,2CAA2C;QAC3C,IAAI,OAAO,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC;YACvC,SAAS;QACX,CAAC;QAED,iDAAiD;QACjD,kCAAkC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAClC;;;uEAGiE,EACjE,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAC/B,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;YACpC,0DAA0D;YAC1D,kCAAkC;YAClC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAC/B;;;;;yEAKiE,EACjE,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CACnC,CAAC;YAEF,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAEtD,oDAAoD;gBACpD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAEtB,0DAA0D;gBAC1D,0DAA0D;gBAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CACrB;;wCAE8B,EAC9B,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC,CAChC,CAAC;gBAEF,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBACvB,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAE3B,2CAA2C;oBAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;YACjB,QAAQ;YACR,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,gBAAgB;YACzB,SAAS,EAAE,eAAe;YAC1B,YAAY,EAAE,UAAU;YACxB,UAAU,EAAE,WAAW,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACpD,MAAM,EAAE;gBACN,iBAAiB;gBACjB,aAAa,EAAE,WAAW,CAAC,MAAM;gBACjC,WAAW;aACZ;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,aAAa,EAAE,WAAW,CAAC,MAAM;QACjC,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/orchestration/budget/budget_governance.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Budget Governance -- Resource management and constraint enforcement.
+ * S ref: S11 (Resource/Budget), S22 (request_budget), I-20 (never-negative),
+ *        I-03 (atomic audit), FM-02 (cost explosion defense)
+ *
+ * Phase: 3 (Orchestration)
+ * Implements: Budget allocation, consumption tracking, parent-to-child transfer,
+ *             never-negative enforcement via SQLite CHECK constraint + application check,
+ *             6 budget dimensions.
+ *
+ * SD-15: Budget can never go negative. Enforced at both application layer (pre-check)
+ *        and database layer (CHECK constraint on token_remaining >= 0).
+ */
+import type { BudgetGovernor } from '../interfaces/orchestration.js';
+/**
+ * S11: Create the budget governance module.
+ * Factory function returns frozen object per C-07.
+ */
+export declare function createBudgetGovernor(): BudgetGovernor;
+//# sourceMappingURL=budget_governance.d.ts.map

package/dist/orchestration/budget/budget_governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget_governance.d.ts","sourceRoot":"","sources":["../../../src/orchestration/budget/budget_governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EACS,cAAc,EAClC,MAAM,gCAAgC,CAAC;AAExC;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,CA+OrD"}

package/dist/orchestration/budget/budget_governance.js

@@ -0,0 +1,182 @@
+/**
+ * Budget Governance -- Resource management and constraint enforcement.
+ * S ref: S11 (Resource/Budget), S22 (request_budget), I-20 (never-negative),
+ *        I-03 (atomic audit), FM-02 (cost explosion defense)
+ *
+ * Phase: 3 (Orchestration)
+ * Implements: Budget allocation, consumption tracking, parent-to-child transfer,
+ *             never-negative enforcement via SQLite CHECK constraint + application check,
+ *             6 budget dimensions.
+ *
+ * SD-15: Budget can never go negative. Enforced at both application layer (pre-check)
+ *        and database layer (CHECK constraint on token_remaining >= 0).
+ */
+/**
+ * S11: Create the budget governance module.
+ * Factory function returns frozen object per C-07.
+ */
+export function createBudgetGovernor() {
+    /** S11: Allocate budget for a new mission */
+    function allocate(deps, missionId, budget, deadline) {
+        const now = deps.time.nowISO();
+        // CQ-08 fix: I-03 -- budget allocation INSERT + audit in same transaction.
+        // Note: allocate() is typically called inside MissionStore.create()'s transaction,
+        // but the mission_store inlines the INSERT directly rather than calling this method.
+        // When called standalone, this ensures I-03 compliance.
+        // FM-10 / CORR1-03: Resolve tenant_id from mission record (not hardcoded NULL)
+        const missionRow = deps.conn.get('SELECT tenant_id FROM core_missions WHERE id = ?', [missionId]);
+        const tenantId = (missionRow?.tenant_id ?? null);
+        deps.conn.transaction(() => {
+            deps.conn.run(`INSERT INTO core_resources (mission_id, tenant_id, token_allocated, token_consumed, token_remaining, deadline, updated_at)
+         VALUES (?, ?, ?, 0, ?, ?, ?)`, [missionId, tenantId, budget, budget, deadline, now]);
+            deps.audit.append(deps.conn, {
+                tenantId,
+                actorType: 'system',
+                actorId: 'budget_governor',
+                operation: 'allocate_budget',
+                resourceType: 'resource',
+                resourceId: missionId,
+                detail: { budget, deadline },
+            });
+        });
+        return { ok: true, value: undefined };
+    }
+    /**
+     * S11: Consume resources. I-20: token_remaining never negative.
+     * SD-15: Pre-check at application layer + CHECK constraint at DB layer.
+     * FM-02: Defense against cost explosion -- halt if budget exceeded.
+     */
+    function consume(deps, missionId, amount) {
+        const tokenCost = amount.tokens ?? 0;
+        const timeCost = amount.time ?? 0;
+        const computeCost = amount.compute ?? 0;
+        const storageCost = amount.storage ?? 0;
+        // Pre-check: verify budget allows this consumption
+        const resource = deps.conn.get('SELECT token_remaining, compute_max_seconds, compute_consumed_seconds, storage_max_bytes, storage_consumed_bytes, tenant_id FROM core_resources WHERE mission_id = ?', [missionId]);
+        if (!resource) {
+            return { ok: false, error: { code: 'MISSION_NOT_ACTIVE', message: `No resource record for mission ${missionId}`, spec: 'S11' } };
+        }
+        if (tokenCost > resource.token_remaining) {
+            // CF-016: On BUDGET_EXCEEDED, transition mission to BLOCKED state.
+            // Same pattern as checkpoint_coordinator: direct SQL UPDATE + audit.
+            // FM-02: Defense against cost explosion — halt execution.
+            const blockNow = deps.time.nowISO();
+            deps.conn.transaction(() => {
+                const blockResult = deps.conn.run(`UPDATE core_missions SET state = 'BLOCKED', updated_at = ?
+           WHERE id = ? AND state NOT IN ('COMPLETED', 'FAILED', 'CANCELLED', 'BLOCKED')`, [blockNow, missionId]);
+                if (blockResult.changes > 0) {
+                    deps.audit.append(deps.conn, {
+                        tenantId: resource.tenant_id,
+                        actorType: 'system',
+                        actorId: 'budget_governor',
+                        operation: 'mission_transition',
+                        resourceType: 'mission',
+                        resourceId: missionId,
+                        detail: { to: 'BLOCKED', reason: 'budget_exceeded', tokenCost, tokenRemaining: resource.token_remaining },
+                    });
+                }
+            });
+            return { ok: false, error: { code: 'BUDGET_EXCEEDED', message: `Token cost ${tokenCost} exceeds remaining ${resource.token_remaining}`, spec: 'S11' } };
+        }
+        const now = deps.time.nowISO();
+        deps.conn.transaction(() => {
+            deps.conn.run(`UPDATE core_resources
+         SET token_consumed = token_consumed + ?,
+             token_remaining = token_remaining - ?,
+             time_elapsed_ms = time_elapsed_ms + ?,
+             compute_consumed_seconds = compute_consumed_seconds + ?,
+             storage_consumed_bytes = storage_consumed_bytes + ?,
+             updated_at = ?
+         WHERE mission_id = ?`, [tokenCost, tokenCost, timeCost, computeCost, storageCost, now, missionId]);
+            deps.audit.append(deps.conn, {
+                tenantId: resource.tenant_id,
+                actorType: 'system',
+                actorId: 'budget_governor',
+                operation: 'consume_budget',
+                resourceType: 'resource',
+                resourceId: missionId,
+                detail: { tokens: tokenCost, time: timeCost, compute: computeCost, storage: storageCost },
+            });
+        });
+        return { ok: true, value: undefined };
+    }
+    /**
+     * S22: Request additional budget from parent mission.
+     * SD-15: Atomic parent-child transfer in same transaction.
+     * If no parent (root mission), requires human approval.
+     */
+    function requestFromParent(deps, missionId, amount, justification) {
+        // Validate justification (S22: JUSTIFICATION_REQUIRED)
+        if (!justification || justification.trim().length === 0) {
+            return { ok: false, error: { code: 'JUSTIFICATION_REQUIRED', message: 'Justification must be non-empty', spec: 'S22' } };
+        }
+        // Verify mission exists and is active
+        const mission = deps.conn.get('SELECT id, parent_id, state, tenant_id FROM core_missions WHERE id = ?', [missionId]);
+        if (!mission) {
+            return { ok: false, error: { code: 'MISSION_NOT_ACTIVE', message: `Mission ${missionId} not found`, spec: 'S22' } };
+        }
+        const activeStates = ['CREATED', 'PLANNING', 'EXECUTING', 'REVIEWING', 'PAUSED', 'DEGRADED', 'BLOCKED'];
+        if (!activeStates.includes(mission.state)) {
+            return { ok: false, error: { code: 'MISSION_NOT_ACTIVE', message: `Mission in terminal state ${mission.state}`, spec: 'S22' } };
+        }
+        // Root missions: require human approval
+        if (mission.parent_id === null) {
+            return { ok: false, error: { code: 'HUMAN_APPROVAL_REQUIRED', message: 'Root mission budget requests require human approval', spec: 'S22' } };
+        }
+        // Check parent has sufficient remaining budget
+        const parentResource = deps.conn.get('SELECT token_remaining FROM core_resources WHERE mission_id = ?', [mission.parent_id]);
+        if (!parentResource || parentResource.token_remaining < amount) {
+            return { ok: false, error: { code: 'PARENT_INSUFFICIENT', message: `Parent remaining ${parentResource?.token_remaining ?? 0} < requested ${amount}`, spec: 'S22' } };
+        }
+        const now = deps.time.nowISO();
+        // SD-15: Atomic parent-child budget transfer in same transaction
+        deps.conn.transaction(() => {
+            // Decrement parent
+            deps.conn.run(`UPDATE core_resources SET token_remaining = token_remaining - ?, updated_at = ? WHERE mission_id = ?`, [amount, now, mission.parent_id]);
+            // Increment child
+            deps.conn.run(`UPDATE core_resources SET token_allocated = token_allocated + ?, token_remaining = token_remaining + ?, updated_at = ? WHERE mission_id = ?`, [amount, amount, now, missionId]);
+            // I-03: Audit entry with justification
+            deps.audit.append(deps.conn, {
+                tenantId: mission.tenant_id,
+                actorType: 'system',
+                actorId: 'budget_governor',
+                operation: 'budget_transfer',
+                resourceType: 'resource',
+                resourceId: missionId,
+                detail: { from: mission.parent_id, to: missionId, amount, justification },
+            });
+        });
+        return {
+            ok: true,
+            value: {
+                approved: true,
+                allocated: { tokens: amount },
+                source: 'parent',
+            },
+        };
+    }
+    /** S11: Check if budget allows estimated cost */
+    function checkBudget(deps, missionId, estimatedCost) {
+        const resource = deps.conn.get('SELECT token_remaining FROM core_resources WHERE mission_id = ?', [missionId]);
+        if (!resource) {
+            return { ok: false, error: { code: 'MISSION_NOT_ACTIVE', message: `No resource record for mission ${missionId}`, spec: 'S11' } };
+        }
+        return { ok: true, value: resource.token_remaining >= estimatedCost };
+    }
+    /** S11: Get remaining budget for a mission */
+    function getRemaining(deps, missionId) {
+        const resource = deps.conn.get('SELECT token_remaining FROM core_resources WHERE mission_id = ?', [missionId]);
+        if (!resource) {
+            return { ok: false, error: { code: 'MISSION_NOT_ACTIVE', message: `No resource record for mission ${missionId}`, spec: 'S11' } };
+        }
+        return { ok: true, value: resource.token_remaining };
+    }
+    return Object.freeze({
+        allocate,
+        consume,
+        requestFromParent,
+        checkBudget,
+        getRemaining,
+    });
+}
+//# sourceMappingURL=budget_governance.js.map

package/dist/orchestration/budget/budget_governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget_governance.js","sourceRoot":"","sources":["../../../src/orchestration/budget/budget_governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAElC,6CAA6C;IAC7C,SAAS,QAAQ,CACf,IAAuB,EACvB,SAAoB,EACpB,MAAc,EACd,QAAgB;QAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,2EAA2E;QAC3E,mFAAmF;QACnF,qFAAqF;QACrF,wDAAwD;QACxD,+EAA+E;QAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9B,kDAAkD,EAClD,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI,CAAoB,CAAC;QAEpE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CACX;sCAC8B,EAC9B,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CACrD,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC3B,QAAQ;gBACR,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,iBAAiB;gBAC1B,SAAS,EAAE,iBAAiB;gBAC5B,YAAY,EAAE,UAAU;gBACxB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,SAAS,OAAO,CACd,IAAuB,EACvB,SAAoB,EACpB,MAA8E;QAE9E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QAClC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAExC,mDAAmD;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5B,sKAAsK,EACtK,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,kCAAkC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnI,CAAC;QAED,IAAI,SAAS,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;YACzC,mEAAmE;YACnE,qEAAqE;YACrE,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;gBACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/B;yFAC+E,EAC/E,CAAC,QAAQ,EAAE,SAAS,CAAC,CACtB,CAAC;gBACF,IAAI,WAAW,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;wBAC3B,QAAQ,EAAE,QAAQ,CAAC,SAAS;wBAC5B,SAAS,EAAE,QAAQ;wBACnB,OAAO,EAAE,iBAAiB;wBAC1B,SAAS,EAAE,oBAAoB;wBAC/B,YAAY,EAAE,SAAS;wBACvB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,CAAC,eAAe,EAAE;qBAC1G,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,SAAS,sBAAsB,QAAQ,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1J,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CACX;;;;;;;8BAOsB,EACtB,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC,CAC3E,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC3B,QAAQ,EAAE,QAAQ,CAAC,SAAS;gBAC5B,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,iBAAiB;gBAC1B,SAAS,EAAE,gBAAgB;gBAC3B,YAAY,EAAE,UAAU;gBACxB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;aAC1F,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,SAAS,iBAAiB,CACxB,IAAuB,EACvB,SAAoB,EACpB,MAAc,EACd,aAAqB;QAErB,uDAAuD;QACvD,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,iCAAiC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3H,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3B,wEAAwE,EACxE,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,WAAW,SAAS,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtH,CAAC;QACD,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACxG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,6BAA6B,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClI,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,qDAAqD,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChJ,CAAC;QAED,+CAA+C;QAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAClC,iEAAiE,EACjE,CAAC,OAAO,CAAC,SAAS,CAAC,CACpB,CAAC;QACF,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,eAAe,GAAG,MAAM,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,oBAAoB,cAAc,EAAE,eAAe,IAAI,CAAC,gBAAgB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvK,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAE/B,iEAAiE;QACjE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACzB,mBAAmB;YACnB,IAAI,CAAC,IAAI,CAAC,GAAG,CACX,sGAAsG,EACtG,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CACjC,CAAC;YAEF,kBAAkB;YAClB,IAAI,CAAC,IAAI,CAAC,GAAG,CACX,6IAA6I,EAC7I,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CACjC,CAAC;YAEF,uCAAuC;YACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC3B,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,iBAAiB;gBAC1B,SAAS,EAAE,iBAAiB;gBAC5B,YAAY,EAAE,UAAU;gBACxB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE;aAC1E,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACL,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC7B,MAAM,EAAE,QAAQ;aACjB;SACF,CAAC;IACJ,CAAC;IAED,iDAAiD;IACjD,SAAS,WAAW,CAClB,IAAuB,EACvB,SAAoB,EACpB,aAAqB;QAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5B,iEAAiE,EACjE,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,kCAAkC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnI,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,eAAe,IAAI,aAAa,EAAE,CAAC;IACxE,CAAC;IAED,8CAA8C;IAC9C,SAAS,YAAY,CACnB,IAAuB,EACvB,SAAoB;QAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5B,iEAAiE,EACjE,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,kCAAkC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnI,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC;IACvD,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,OAAO;QACP,iBAAiB;QACjB,WAAW;QACX,YAAY;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/orchestration/checkpoints/checkpoint_coordinator.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Checkpoint Coordinator -- Checkpoint lifecycle management.
+ * S ref: S24 (Checkpoint), I-17 (governance boundary), I-24 (goal anchoring),
+ *        I-25 (deterministic replay), I-03 (atomic audit)
+ *
+ * Phase: 3 (Orchestration)
+ * Implements: Checkpoint fire/respond/expire lifecycle,
+ *             7 trigger types, confidence-driven behavior thresholds,
+ *             semantic drift check against goal anchor (I-24),
+ *             replan validation (same rules as propose_task_graph).
+ *
+ * SD-22: Checkpoints are system-initiated. Agents respond. The orchestrator decides.
+ * SD-23: Confidence thresholds: 0.8-1.0 continue, 0.5-0.8 flagged,
+ *        0.2-0.5 pause+human, 0.0-0.2 halt+escalate.
+ */
+import type { CheckpointCoordinator } from '../interfaces/orchestration.js';
+/**
+ * S24: Create the checkpoint coordinator module.
+ * Factory function returns frozen object per C-07.
+ */
+export declare function createCheckpointCoordinator(): CheckpointCoordinator;
+//# sourceMappingURL=checkpoint_coordinator.d.ts.map

package/dist/orchestration/checkpoints/checkpoint_coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint_coordinator.d.ts","sourceRoot":"","sources":["../../../src/orchestration/checkpoints/checkpoint_coordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EACS,qBAAqB,EAGzC,MAAM,gCAAgC,CAAC;AAOxC;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,qBAAqB,CA4RnE"}

package/dist/orchestration/checkpoints/checkpoint_coordinator.js

@@ -0,0 +1,252 @@
+/**
+ * Checkpoint Coordinator -- Checkpoint lifecycle management.
+ * S ref: S24 (Checkpoint), I-17 (governance boundary), I-24 (goal anchoring),
+ *        I-25 (deterministic replay), I-03 (atomic audit)
+ *
+ * Phase: 3 (Orchestration)
+ * Implements: Checkpoint fire/respond/expire lifecycle,
+ *             7 trigger types, confidence-driven behavior thresholds,
+ *             semantic drift check against goal anchor (I-24),
+ *             replan validation (same rules as propose_task_graph).
+ *
+ * SD-22: Checkpoints are system-initiated. Agents respond. The orchestrator decides.
+ * SD-23: Confidence thresholds: 0.8-1.0 continue, 0.5-0.8 flagged,
+ *        0.2-0.5 pause+human, 0.0-0.2 halt+escalate.
+ */
+import { CONFIDENCE_BANDS, generateId } from '../interfaces/orchestration.js';
+import { assessDrift } from './drift_engine.js';
+/** SD-23: Default checkpoint timeout (5 minutes) */
+const DEFAULT_TIMEOUT_MS = 5 * 60 * 1000;
+/**
+ * S24: Create the checkpoint coordinator module.
+ * Factory function returns frozen object per C-07.
+ */
+export function createCheckpointCoordinator() {
+    /**
+     * S24: Fire a checkpoint for a mission.
+     * System-initiated only (I-17: governance boundary).
+     * Returns checkpoint ID for agent to respond to.
+     */
+    function fire(deps, missionId, trigger, detail) {
+        const checkpointId = generateId();
+        const nowMs = deps.time.nowMs();
+        const timeoutAt = new Date(nowMs + DEFAULT_TIMEOUT_MS).toISOString();
+        const isoNow = deps.time.nowISO();
+        // F-04 fix: Derive tenant_id from mission (T-4 cross-tenant isolation)
+        const missionRow = deps.conn.get('SELECT tenant_id FROM core_missions WHERE id = ?', [missionId]);
+        const tenantId = (missionRow?.tenant_id ?? null);
+        deps.conn.transaction(() => {
+            deps.conn.run(`INSERT INTO core_checkpoints (id, mission_id, tenant_id, trigger_type, trigger_detail, state, timeout_at, created_at)
+         VALUES (?, ?, ?, ?, ?, 'PENDING', ?, ?)`, [checkpointId, missionId, tenantId, trigger, detail ? JSON.stringify(detail) : null, timeoutAt, isoNow]);
+            deps.audit.append(deps.conn, {
+                tenantId,
+                actorType: 'system',
+                actorId: 'checkpoint_coordinator',
+                operation: 'fire_checkpoint',
+                resourceType: 'checkpoint',
+                resourceId: checkpointId,
+                detail: { missionId, trigger, detail },
+            });
+        });
+        return { ok: true, value: checkpointId };
+    }
+    /**
+     * S24: Process agent's response to a checkpoint.
+     * SD-23: Confidence-driven behavior determines system decision.
+     * I-24: Semantic drift check against goal anchor.
+     * I-25: Full exchange recorded for replay.
+     */
+    function processResponse(deps, input) {
+        // Verify checkpoint exists and is PENDING
+        const checkpoint = deps.conn.get('SELECT id, mission_id, state, timeout_at FROM core_checkpoints WHERE id = ?', [input.checkpointId]);
+        if (!checkpoint) {
+            return { ok: false, error: { code: 'CHECKPOINT_EXPIRED', message: `Checkpoint ${input.checkpointId} not found`, spec: 'S24' } };
+        }
+        if (checkpoint.state !== 'PENDING') {
+            return { ok: false, error: { code: 'CHECKPOINT_EXPIRED', message: `Checkpoint already in state ${checkpoint.state}`, spec: 'S24' } };
+        }
+        // Check timeout
+        const nowMs = deps.time.nowMs();
+        if (nowMs > new Date(checkpoint.timeout_at).getTime()) {
+            return { ok: false, error: { code: 'CHECKPOINT_EXPIRED', message: 'Checkpoint response after timeout', spec: 'S24' } };
+        }
+        // Debt 3: Derive tenant_id from mission for audit trail
+        const cpMissionRow = deps.conn.get('SELECT tenant_id FROM core_missions WHERE id = ?', [checkpoint.mission_id]);
+        const cpTenantId = (cpMissionRow?.tenant_id ?? null);
+        // SD-23: Determine system decision based on confidence + proposed action
+        let systemAction;
+        let reason;
+        const confidence = input.confidence;
+        if (input.proposedAction === 'abort') {
+            // Agent wants to abort -- honor it
+            systemAction = 'aborted';
+            reason = 'Agent proposed abort';
+        }
+        else if (input.proposedAction === 'escalate') {
+            // Agent wants to escalate -- honor it
+            systemAction = 'escalated';
+            reason = input.escalationReason ?? 'Agent requested escalation';
+        }
+        else if (input.proposedAction === 'replan') {
+            // Validate the plan revision if provided
+            if (input.planRevision !== null) {
+                // Note: Full validation would invoke task graph engine.
+                // At this layer, we accept the intent. The syscall layer
+                // will validate via proposeTaskGraph when installing.
+                systemAction = 'replan_accepted';
+                reason = 'Replan accepted for validation';
+            }
+            else {
+                systemAction = 'replan_rejected';
+                reason = 'Replan proposed but no plan revision provided';
+            }
+        }
+        else {
+            // 'continue' -- apply confidence-driven behavior
+            if (confidence >= CONFIDENCE_BANDS.CONTINUE_AUTONOMOUS.min) {
+                systemAction = 'continue';
+                reason = `High confidence (${confidence}) -- continue autonomously`;
+            }
+            else if (confidence >= CONFIDENCE_BANDS.CONTINUE_FLAGGED.min) {
+                systemAction = 'continue';
+                reason = `Medium confidence (${confidence}) -- continue with flag for review`;
+            }
+            else if (confidence >= CONFIDENCE_BANDS.PAUSE_HUMAN_INPUT.min) {
+                systemAction = 'escalated';
+                reason = `Low confidence (${confidence}) -- pause for human input`;
+            }
+            else {
+                systemAction = 'escalated';
+                reason = `Very low confidence (${confidence}) -- halt and escalate`;
+            }
+        }
+        // I-24: Assess semantic drift against goal anchor
+        // Drift assessment runs before the transaction so its result can override systemAction.
+        // The assessDrift function INSERTs into core_drift_assessments — this must happen
+        // inside the same transaction as the checkpoint update for atomicity.
+        // We compute the drift result first (outside transaction) conceptually,
+        // but the actual INSERT happens in the transaction below.
+        const driftMissionId = checkpoint.mission_id;
+        const isoNow = deps.time.nowISO();
+        deps.conn.transaction(() => {
+            // I-24: Run drift assessment (INSERTs into core_drift_assessments within this transaction)
+            const driftResult = assessDrift(input.checkpointId, driftMissionId, input.assessment, deps.conn, cpTenantId, deps.audit, deps.time);
+            // I-24: If drift engine returns 'escalated' AND current system_action is 'continue',
+            // override to 'escalated' with reason 'goal_drift_detected'
+            if (driftResult.actionTaken === 'escalated' && systemAction === 'continue') {
+                systemAction = 'escalated';
+                reason = driftResult.escalationReason ?? 'goal_drift_detected';
+            }
+            // Update checkpoint state
+            deps.conn.run(`UPDATE core_checkpoints
+         SET state = 'RESPONDED',
+             assessment = ?,
+             confidence = ?,
+             proposed_action = ?,
+             plan_revision = ?,
+             escalation_reason = ?,
+             system_action = ?,
+             system_reason = ?,
+             responded_at = ?
+         WHERE id = ?`, [
+                input.assessment,
+                input.confidence,
+                input.proposedAction,
+                input.planRevision ? JSON.stringify(input.planRevision) : null,
+                input.escalationReason,
+                systemAction,
+                reason,
+                isoNow,
+                input.checkpointId,
+            ]);
+            // Side effects based on system action
+            if (systemAction === 'escalated') {
+                // Mission -> BLOCKED
+                const escalateResult = deps.conn.run(`UPDATE core_missions SET state = 'BLOCKED', updated_at = ? WHERE id = ? AND state NOT IN ('COMPLETED','FAILED','CANCELLED')`, [isoNow, checkpoint.mission_id]);
+                // F-08 fix: I-03 audit for mission state side-effect
+                if (escalateResult.changes > 0) {
+                    deps.audit.append(deps.conn, {
+                        tenantId: cpTenantId,
+                        actorType: 'system',
+                        actorId: 'checkpoint_coordinator',
+                        operation: 'mission_transition',
+                        resourceType: 'mission',
+                        resourceId: checkpoint.mission_id,
+                        detail: { to: 'BLOCKED', reason: 'checkpoint_escalation', checkpointId: input.checkpointId },
+                    });
+                }
+            }
+            else if (systemAction === 'aborted') {
+                // Mission -> CANCELLED
+                const abortResult = deps.conn.run(`UPDATE core_missions SET state = 'CANCELLED', updated_at = ?, completed_at = ? WHERE id = ? AND state NOT IN ('COMPLETED','FAILED','CANCELLED')`, [isoNow, isoNow, checkpoint.mission_id]);
+                // F-08 fix: I-03 audit for mission state side-effect
+                if (abortResult.changes > 0) {
+                    deps.audit.append(deps.conn, {
+                        tenantId: cpTenantId,
+                        actorType: 'system',
+                        actorId: 'checkpoint_coordinator',
+                        operation: 'mission_transition',
+                        resourceType: 'mission',
+                        resourceId: checkpoint.mission_id,
+                        detail: { to: 'CANCELLED', reason: 'checkpoint_abort', checkpointId: input.checkpointId },
+                    });
+                }
+            }
+            // I-03/I-25: Full checkpoint exchange in audit
+            deps.audit.append(deps.conn, {
+                tenantId: cpTenantId,
+                actorType: 'system',
+                actorId: 'checkpoint_coordinator',
+                operation: 'respond_checkpoint',
+                resourceType: 'checkpoint',
+                resourceId: input.checkpointId,
+                detail: {
+                    assessment: input.assessment,
+                    confidence: input.confidence,
+                    proposedAction: input.proposedAction,
+                    systemAction,
+                    reason,
+                    missionId: checkpoint.mission_id,
+                },
+            });
+        });
+        return {
+            ok: true,
+            value: { action: systemAction, reason },
+        };
+    }
+    /** S24: Expire overdue checkpoints */
+    function expireOverdue(deps) {
+        const now = deps.time.nowISO();
+        // SYSTEM_SCOPE: batch expiry across all tenants — must not be tenant-scoped.
+        // expireOverdue is a system-level maintenance operation. If deps.conn is a
+        // TenantScopedConnection, unwrap to raw to avoid scoping the UPDATE to a single tenant.
+        const rawConn = 'raw' in deps.conn
+            ? deps.conn.raw
+            : deps.conn;
+        // F-06 fix: Wrap in transaction with audit entry (I-03)
+        let expired = 0;
+        rawConn.transaction(() => {
+            const result = rawConn.run(`UPDATE core_checkpoints SET state = 'EXPIRED' WHERE state = 'PENDING' AND timeout_at < ?`, [now]);
+            expired = result.changes;
+            if (expired > 0) {
+                deps.audit.append(rawConn, {
+                    tenantId: null,
+                    actorType: 'system',
+                    actorId: 'checkpoint_coordinator',
+                    operation: 'expire_checkpoints',
+                    resourceType: 'checkpoint',
+                    resourceId: 'batch',
+                    detail: { expiredCount: expired, expiredAt: now },
+                });
+            }
+        });
+        return { ok: true, value: expired };
+    }
+    return Object.freeze({
+        fire,
+        processResponse,
+        expireOverdue,
+    });
+}
+//# sourceMappingURL=checkpoint_coordinator.js.map

package/dist/orchestration/checkpoints/checkpoint_coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint_coordinator.js","sourceRoot":"","sources":["../../../src/orchestration/checkpoints/checkpoint_coordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,oDAAoD;AACpD,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,2BAA2B;IAEzC;;;;OAIG;IACH,SAAS,IAAI,CACX,IAAuB,EACvB,SAAoB,EACpB,OAA0B,EAC1B,MAAgB;QAEhB,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAElC,uEAAuE;QACvE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9B,kDAAkD,EAClD,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI,CAAoB,CAAC;QAEpE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CACX;iDACyC,EACzC,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CACxG,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC3B,QAAQ;gBACR,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,wBAAwB;gBACjC,SAAS,EAAE,iBAAiB;gBAC5B,YAAY,EAAE,YAAY;gBAC1B,UAAU,EAAE,YAAY;gBACxB,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;aACvC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC3C,CAAC;IAED;;;;;OAKG;IACH,SAAS,eAAe,CACtB,IAAuB,EACvB,KAA6B;QAE7B,0CAA0C;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAC9B,6EAA6E,EAC7E,CAAC,KAAK,CAAC,YAAY,CAAC,CACrB,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,cAAc,KAAK,CAAC,YAAY,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClI,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,+BAA+B,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvI,CAAC;QAED,gBAAgB;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzH,CAAC;QAED,wDAAwD;QACxD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAChC,kDAAkD,EAClD,CAAC,UAAU,CAAC,UAAU,CAAC,CACxB,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,SAAS,IAAI,IAAI,CAAoB,CAAC;QAExE,yEAAyE;QACzE,IAAI,YAAgC,CAAC;QACrC,IAAI,MAAc,CAAC;QAEnB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAEpC,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;YACrC,mCAAmC;YACnC,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM,GAAG,sBAAsB,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YAC/C,sCAAsC;YACtC,YAAY,GAAG,WAAW,CAAC;YAC3B,MAAM,GAAG,KAAK,CAAC,gBAAgB,IAAI,4BAA4B,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;YAC7C,yCAAyC;YACzC,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBAChC,wDAAwD;gBACxD,yDAAyD;gBACzD,sDAAsD;gBACtD,YAAY,GAAG,iBAAiB,CAAC;gBACjC,MAAM,GAAG,gCAAgC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,iBAAiB,CAAC;gBACjC,MAAM,GAAG,+CAA+C,CAAC;YAC3D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,iDAAiD;YACjD,IAAI,UAAU,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC;gBAC3D,YAAY,GAAG,UAAU,CAAC;gBAC1B,MAAM,GAAG,oBAAoB,UAAU,4BAA4B,CAAC;YACtE,CAAC;iBAAM,IAAI,UAAU,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC;gBAC/D,YAAY,GAAG,UAAU,CAAC;gBAC1B,MAAM,GAAG,sBAAsB,UAAU,oCAAoC,CAAC;YAChF,CAAC;iBAAM,IAAI,UAAU,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC;gBAChE,YAAY,GAAG,WAAW,CAAC;gBAC3B,MAAM,GAAG,mBAAmB,UAAU,4BAA4B,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,WAAW,CAAC;gBAC3B,MAAM,GAAG,wBAAwB,UAAU,wBAAwB,CAAC;YACtE,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,wFAAwF;QACxF,kFAAkF;QAClF,sEAAsE;QACtE,wEAAwE;QACxE,0DAA0D;QAC1D,MAAM,cAAc,GAAG,UAAU,CAAC,UAAuB,CAAC;QAE1D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAElC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YACzB,2FAA2F;YAC3F,MAAM,WAAW,GAAG,WAAW,CAC7B,KAAK,CAAC,YAAY,EAClB,cAAc,EACd,KAAK,CAAC,UAAU,EAChB,IAAI,CAAC,IAAI,EACT,UAAU,EACV,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,IAAI,CACV,CAAC;YAEF,qFAAqF;YACrF,4DAA4D;YAC5D,IAAI,WAAW,CAAC,WAAW,KAAK,WAAW,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;gBAC3E,YAAY,GAAG,WAAW,CAAC;gBAC3B,MAAM,GAAG,WAAW,CAAC,gBAAgB,IAAI,qBAAqB,CAAC;YACjE,CAAC;YAED,0BAA0B;YAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CACX;;;;;;;;;;sBAUc,EACd;gBACE,KAAK,CAAC,UAAU;gBAChB,KAAK,CAAC,UAAU;gBAChB,KAAK,CAAC,cAAc;gBACpB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC9D,KAAK,CAAC,gBAAgB;gBACtB,YAAY;gBACZ,MAAM;gBACN,MAAM;gBACN,KAAK,CAAC,YAAY;aACnB,CACF,CAAC;YAEF,sCAAsC;YACtC,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;gBACjC,qBAAqB;gBACrB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAClC,6HAA6H,EAC7H,CAAC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,CAChC,CAAC;gBACF,qDAAqD;gBACrD,IAAI,cAAc,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;wBAC3B,QAAQ,EAAE,UAAU;wBACpB,SAAS,EAAE,QAAQ;wBACnB,OAAO,EAAE,wBAAwB;wBACjC,SAAS,EAAE,oBAAoB;wBAC/B,YAAY,EAAE,SAAS;wBACvB,UAAU,EAAE,UAAU,CAAC,UAAU;wBACjC,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;qBAC7F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBACtC,uBAAuB;gBACvB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/B,iJAAiJ,EACjJ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,CACxC,CAAC;gBACF,qDAAqD;gBACrD,IAAI,WAAW,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;wBAC3B,QAAQ,EAAE,UAAU;wBACpB,SAAS,EAAE,QAAQ;wBACnB,OAAO,EAAE,wBAAwB;wBACjC,SAAS,EAAE,oBAAoB;wBAC/B,YAAY,EAAE,SAAS;wBACvB,UAAU,EAAE,UAAU,CAAC,UAAU;wBACjC,MAAM,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,+CAA+C;YAC/C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC3B,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,wBAAwB;gBACjC,SAAS,EAAE,oBAAoB;gBAC/B,YAAY,EAAE,YAAY;gBAC1B,UAAU,EAAE,KAAK,CAAC,YAAY;gBAC9B,MAAM,EAAE;oBACN,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,YAAY;oBACZ,MAAM;oBACN,SAAS,EAAE,UAAU,CAAC,UAAU;iBACjC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE;SACxC,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,SAAS,aAAa,CAAC,IAAuB;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAE/B,6EAA6E;QAC7E,2EAA2E;QAC3E,wFAAwF;QACxF,MAAM,OAAO,GAAuB,KAAK,IAAI,IAAI,CAAC,IAAI;YACpD,CAAC,CAAE,IAAI,CAAC,IAAgC,CAAC,GAAyB;YAClE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAEd,wDAAwD;QACxD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE;YACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CACxB,0FAA0F,EAC1F,CAAC,GAAG,CAAC,CACN,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAEzB,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;oBACzB,QAAQ,EAAE,IAAI;oBACd,SAAS,EAAE,QAAQ;oBACnB,OAAO,EAAE,wBAAwB;oBACjC,SAAS,EAAE,oBAAoB;oBAC/B,YAAY,EAAE,YAAY;oBAC1B,UAAU,EAAE,OAAO;oBACnB,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE;iBAClD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,eAAe;QACf,aAAa;KACd,CAAC,CAAC;AACL,CAAC"}

package/dist/orchestration/checkpoints/drift_engine.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Drift Engine — Semantic drift detection at checkpoints.
+ * S ref: I-24 (Goal Anchoring), FM-14 (Semantic Drift), FM-16 (Mission Drift)
+ *
+ * Phase: Sprint 3 (Knowledge Graph)
+ *
+ * Algorithm:
+ *   1. Read goal anchor from core_mission_goals (NOT core_missions — T-S3-018)
+ *   2. Compute TF-IDF cosine similarity between objective and assessment text
+ *   3. driftScore = 1.0 - similarityScore
+ *   4. Threshold: > 0.7 escalated, 0.4-0.7 flagged, < 0.4 none
+ *   5. INSERT drift assessment record (append-only)
+ *
+ * Reuses computeSimilarity from technique_extractor.ts (D1: local TF-IDF cosine).
+ * FO-004: upgrade to embedding-based similarity when IC-08 ships.
+ *
+ * Safety constraints:
+ *   - Reads from core_mission_goals (trigger-protected, I-24)
+ *   - Tenant isolation via mission_id FK (core_mission_goals has no tenant_id;
+ *     isolation is enforced at the mission level — the mission owns the tenant scope)
+ *   - Append-only: core_drift_assessments has triggers blocking UPDATE/DELETE
+ *   - TimeProvider for all timestamps
+ *
+ * Spec trace: §4 I-24, §6 FM-14, §16 FM-16
+ */
+import type { DatabaseConnection, AuditTrail, TenantId, MissionId, TimeProvider } from '../../kernel/interfaces/index.js';
+/** Result of a drift assessment. */
+export interface DriftResult {
+    /** Drift score: 0 = no drift, 1 = complete drift. */
+    readonly driftScore: number;
+    /** Similarity score: 0 = no similarity, 1 = identical. */
+    readonly similarityScore: number;
+    /** Action taken based on thresholds. */
+    readonly actionTaken: 'none' | 'flagged' | 'escalated';
+    /** Escalation reason (if actionTaken is 'escalated'). */
+    readonly escalationReason: string | null;
+}
+/**
+ * Assess semantic drift between a checkpoint's assessment text and the mission's
+ * goal anchor objective.
+ *
+ * @param checkpointId - ID of the checkpoint being assessed
+ * @param missionId - Mission ID to read goal anchor from
+ * @param assessmentText - The checkpoint's assessment text to compare
+ * @param conn - Database connection
+ * @param tenantId - Tenant ID for isolation (null for single-tenant)
+ * @param audit - Audit trail
+ * @param time - TimeProvider for timestamps
+ * @returns DriftResult with scores and action
+ */
+export declare function assessDrift(checkpointId: string, missionId: MissionId, assessmentText: string, conn: DatabaseConnection, tenantId: TenantId | null, audit: AuditTrail, time: TimeProvider): DriftResult;
+//# sourceMappingURL=drift_engine.d.ts.map

package/dist/orchestration/checkpoints/drift_engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift_engine.d.ts","sourceRoot":"","sources":["../../../src/orchestration/checkpoints/drift_engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAO1H,oCAAoC;AACpC,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;IACvD,yDAAyD;IACzD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAWD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CACzB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,SAAS,EACpB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,kBAAkB,EACxB,QAAQ,EAAE,QAAQ,GAAG,IAAI,EACzB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,YAAY,GACjB,WAAW,CAsFb"}